$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft File: CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft (raw, json) Hash identifier: S/1hrotVmJbHoUliajqJkvLFRRxZU+3Tan3XZ2rr8TE= Subject key identifier: 20:78:78:CA:9C:BA:18:36:BA:F8:62:8E:DF:B5:E5:F8:7B:76:B6:77 Authority key identifier: CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D Certificate issuer: /CN=CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D Certificate serial: 029FB7FED929477268167AC2E4EF1F4D214E28D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 00:52:35 +0000 Manifest this update: Tue 22 Sep 2026 00:47:35 +0000 Manifest next update: Wed 23 Sep 2026 02:30:35 +0000 Files and hashes: 1: CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl (hash: uI9ndS2g+JanWYXXCR/B6ByYMgzuIhVmVGHc8p2uajU=) 2: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: Z37bpImhHNs5LLivIYF8tbbP1TZLCfEz4nG3CbpQ6v0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:9f:b7:fe:d9:29:47:72:68:16:7a:c2:e4:ef:1f:4d:21:4e:28:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D Validity Not Before: Sep 22 00:47:35 2026 GMT Not After : Sep 23 02:30:35 2026 GMT Subject: CN=207878CA9CBA1836BAF8628EDFB5E5F87B76B677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ff:b8:c0:62:97:fa:80:5c:42:6f:a9:5c:51: 07:19:66:5c:84:18:10:82:5e:7b:78:97:fe:e3:fd: 6b:13:57:14:b3:df:35:df:be:f8:04:d3:c6:5a:01: 88:0e:56:d1:e7:fc:e8:4d:ce:97:d1:1c:7a:76:81: 15:30:50:90:40:b1:13:5f:a2:5f:88:69:ee:dc:f5: 9b:71:93:16:f1:21:2a:05:71:ae:f3:c6:fc:34:ab: d3:00:21:ae:23:b1:e9:b5:c8:fc:8d:3c:f7:a1:dc: d5:70:d5:a7:25:c7:1a:47:0d:57:0e:cf:23:56:98: aa:f9:02:7a:c8:f0:49:01:90:8e:3d:63:0c:b4:e8: da:b8:b5:74:2b:c6:9d:5e:c3:e9:f4:47:d3:f2:7b: df:22:2b:eb:f2:d8:9f:04:4d:58:31:15:b3:61:88: 37:57:b7:14:4f:5a:73:cb:6b:0f:ef:7b:b0:69:81: d6:b1:46:36:f3:23:5c:79:c0:3b:03:6a:82:0a:50: e0:6f:16:5e:d6:6c:9d:fa:cb:e2:5c:e8:5f:ba:2c: 77:1d:2c:5b:01:d6:0e:dd:40:2c:41:ba:01:d7:35: 8f:de:10:7f:44:45:4d:8d:4a:19:2c:f6:82:0f:3e: 4c:4f:7c:8e:27:83:14:95:88:f8:7a:29:be:58:93: c9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:78:78:CA:9C:BA:18:36:BA:F8:62:8E:DF:B5:E5:F8:7B:76:B6:77 X509v3 Authority Key Identifier: keyid:CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b1:20:96:40:3d:f0:34:de:4d:df:70:86:7c:9b:98:cb:db: 04:bc:4b:11:7c:48:54:1e:14:24:11:df:84:d0:69:5d:b1:9e: 83:3d:ad:76:a4:5b:98:b1:e1:51:ae:fa:cf:16:02:8a:b1:bd: e9:ff:01:cb:65:7a:d9:b3:1d:f7:79:0d:66:6f:96:a4:78:a2: 8e:ef:6b:a3:a1:a3:4e:53:0e:7a:59:a5:7b:91:d4:32:9c:c6: 6a:4e:80:20:70:f4:53:b0:8a:3c:9f:66:fc:05:f0:a0:21:70: 78:4f:80:ef:93:ec:e8:c3:e3:87:1f:b5:45:e0:25:50:7b:ec: 4f:58:4d:b7:7b:e8:b9:17:2a:6a:1d:8b:cb:f1:60:e7:94:2e: c9:8f:6d:ca:e2:32:9a:bf:a2:40:2d:fa:6c:9a:0a:4f:c1:a3: ce:3f:e6:0a:0d:e7:65:f1:ac:4b:42:ef:23:b8:55:80:6c:a5: c7:00:93:82:d2:2f:ac:82:c0:df:a6:c1:e9:26:19:3f:0c:80: 4c:c5:7e:15:41:31:61:ba:9c:00:db:b7:df:41:98:9e:1f:b6: d6:69:af:61:1c:68:d3:15:8e:dc:7a:47:01:4c:ef:73:bf:2e: 95:dc:18:22:bc:df:0d:98:e8:d9:e8:2b:f8:f7:68:e0:76:31: 35:ed:31:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAp+3/tkpR3JoFnrC5O8fTSFOKNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2QUVEQjAyOUZBMzIwOUQ1QkE3MDQ2QjdCOEY1MjQ3 NUZDQzEwRDAeFw0yNjA5MjIwMDQ3MzVaFw0yNjA5MjMwMjMwMzVaMDMxMTAvBgNV BAMTKDIwNzg3OENBOUNCQTE4MzZCQUY4NjI4RURGQjVFNUY4N0I3NkI2NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI/7jAYpf6gFxCb6lcUQcZZlyE GBCCXnt4l/7j/WsTVxSz3zXfvvgE08ZaAYgOVtHn/OhNzpfRHHp2gRUwUJBAsRNf ol+Iae7c9ZtxkxbxISoFca7zxvw0q9MAIa4jsem1yPyNPPeh3NVw1aclxxpHDVcO zyNWmKr5AnrI8EkBkI49Ywy06Nq4tXQrxp1ew+n0R9Pye98iK+vy2J8ETVgxFbNh iDdXtxRPWnPLaw/ve7BpgdaxRjbzI1x5wDsDaoIKUOBvFl7WbJ36y+Jc6F+6LHcd LFsB1g7dQCxBugHXNY/eEH9ERU2NShks9oIPPkxPfI4ngxSViPh6Kb5Yk8kLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIHh4ypy6GDa6+GKO37Xl+Ht2tncwHwYDVR0j BBgwFoAUzWrtsCn6MgnVunBGt7j1JHX8wQ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmI0YzcwYTEtNTAzNi00NTBiLWI5MzYtNTA4NGY3OGY4MWVmLzAvQ0Q2QUVEQjAy OUZBMzIwOUQ1QkE3MDQ2QjdCOEY1MjQ3NUZDQzEwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDZBRURCMDI5RkEzMjA5RDVCQTcwNDZCN0I4RjUyNDc1RkND MTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmI0YzcwYTEtNTAzNi00NTBiLWI5 MzYtNTA4NGY3OGY4MWVmLzAvQ0Q2QUVEQjAyOUZBMzIwOUQ1QkE3MDQ2QjdCOEY1 MjQ3NUZDQzEwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACexIJZAPfA03k3fcIZ8m5jL2wS8SxF8SFQe FCQR34TQaV2xnoM9rXakW5ix4VGu+s8WAoqxven/ActletmzHfd5DWZvlqR4oo7v a6Oho05TDnpZpXuR1DKcxmpOgCBw9FOwijyfZvwF8KAhcHhPgO+T7OjD44cftUXg JVB77E9YTbd76LkXKmodi8vxYOeULsmPbcriMpq/okAt+myaCk/Bo84/5goN52Xx rEtC7yO4VYBspccAk4LSL6yCwN+mwekmGT8MgEzFfhVBMWG6nADbt99BmJ4fttZp r2EcaNMVjtx6RwFM73O/LpXcGCK83w2Y6NnoK/j3aOB2MTXtMdY= -----END CERTIFICATE-----Generated at Tue Sep 22 05:06:54 2026 by rpki-client